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<^ and groups authorized to read and modify the data. A first client that desires to store data on the file server encrypts the data with a 
tlrst encryption key having an associated first decryption key. The client encrypts the first decryption key with a second encryption 
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The first encryption key encrypted with the group second encryption key is stored in the access control list so that group members 
can obtain access to the encrypted data stored on the file server. 
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TITLE OF THE INVENTION 
Method and Apparatus for Using Non-Secure File Servers 
for Secure Information Storage 

5 

CROSS REFERENCE TO RELATED APPLICATIONS 

N/A 



STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 
10 DEVELOPMENT 

N/A 

BACKGROUND OF THE INVENTION 
The present invention relates to techniques for 

15 securely storing information on a non-secure file server 

and distributing the securely stored information among 
clients authorized to read and modify the information. 

In communications networks, file servers are 
typically employed to store files accessible over the 

20 network. With the advancements in digital data storage 
and the comparatively low cost of data storage, it is now 
commonplace to have one or more file servers that have 
large data storage capacities. Networks employed to 
interconnect various clients with the file server are 

25 often not secure and the file server itself is often not 

secure. Moreover, there are certain applications in 
which it is desirable to store data on file servers 
administered by an organization independent of the 
.clients that have a need to store the data. For example, 

30 a company may desire, for purposes of redundancy, to 
store their information on one file server which is 
secure and located within the corporate environment and 
another file server which is remote from and independent 
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of the corporate enterprise. This may be done to protect 
against the possibility of natural or other disasters 
which could destroy the information stored in the secure 
file server on the corporate environment. Additionally, 
5 it may be more cost effective to outsource the storage 

function for large volume data storage. It would 
therefore be desirable in certain applications to be able 
to store data securely on a non-secure file server while 
being able to share the data among a number of clients 
10 that are authorized to have access to the data. 

BRIEF SUMMARY OF THE INVENTION 
A method and apparatus for storing data securely on 
an non-secure file server is disclosed. The disclosed 

15 technique prevents unauthorized users having access to 

the file server from obtaining intelligible information 
from the data stored on the file server and allows the 
data to be readily accessed by authorized clients or 
members of authorized groups. A first client desiring to 

20 store data on the non-secure file server encrypts the 

data with a first encryption key having an associated 
first decryption key. The first decryption key is 
encrypted r in a preferred embodiment, with a second 
encryption key having an associated second decryption 

25 key. The encrypted data and the encrypted first 

decryption key are forwarded from the first client to the 
file server for storage. The encrypted data is stored on 
the file server and the encrypted first decryption key is 
stored on the file server in an access control list 

30 associated with the encrypted data. In the event other 

clients are to be provided access to the file, the first 
client or another client having access to the data 
encrypts the first decryption key with respective 

"2- 
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encryption keys having associated decryption keys known 
to the respective clients and the additional encrypted 
first Encryption keys are also stored on the non-secure 
file server in association with the encrypted data as 
5 entries in the access control list. In response to a 

request to access the encrypted data, the file server 
returns the encrypted data and at least the applicable 
encrypted first encryption key needed to decrypt the 
data. Alternatively, the file server returns the entire 

10 access control list. Groups of clients may be assigned a 
group encryption key and an associated group decryption 
key. The first decryption key may be encrypted using the 
group encryption key and the first decryption, key 
encrypted with the group encryption key may be stored in 

15 the access control list. The first decryption key may 

then be decrypted by any group member or group server 
having access to the group decryption key. In response 
to a request to access the data, the file server may thus 
return either single entry in the access control list or 

20 the entire access control list* The requesting client or 

a group server decrypts the applicable encrypted first 
decryption key within the list to obtain the decryption 
key needed to decrypt the data. 

Other features, aspects and advantages of the above- 

25 described techniques for securely storing data on a non- 

secure file server are described with particularity in 
the Detailed Description of the Invention which follows. 



BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING 
30 The invention will be more fully understood by 

reference to the following Detailed Description of the 
Invention in conjunction with the Drawing of which: 



-3- 



wo 01/65545 



PCT/USOl/40192 



Fig. 1 is a block diagram illustrating a plurality 
of clients coupled to a file server over a network and 
operative in a manner consistent with the present 
invention; 

5 Fig. 2a is a block diagram of a client of the type 

depicted in. Fig. 1; 

Fig. 2b is a block diagram of a file server of the 
type depicted in Fig. 1; 

Fig. 2c is a block diagram of a group server of the 
10 type depicted in Fig. 1; 

Fig. 3a is a table illustrating an access control 
list including a single list entry; 

Fig. 3b is a table illustrating an access control 
list including three entries within the access control 
15 list; 

Fig. 3c is another example of an access control" list 
that includes four entries within the access control 
list; 

Fig. 3d is another example of an access control list 
20 that includes 5 entries within the access control list; 

Fig. 4a is an illustrative message payload including 
a client identifier; an encrypted first decryption key 
and encrypted data; 

Fig. 4b is an illustrative message payload including 
25 plural client identifiers; an associated encrypted first 

decryption key for each of the respective client 
identifiers and encrypted data; 

Fig. 4c is an illustrative message payload including 
plural client identifiers, an associated encrypted first 
30 decryption key for each of the respective client 
identifiers, and encrypted data; 

Fig. 4d is an illustrative message payload including 
plural client identifiers and a group identifier, an 
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associated encrypted first decryption key for each of the 
respective client and group identifiers, and encrypted 
data; 

Fig. 5 is a flow diagram illustrating a method 
5 employed at a client for encrypting data and an 

associated decryption key for storage on the file server 
of Fig. 1; 

Fig. 6 is a flow diagram illustrating a method 
employed at a client for modifying an access control list 
10 stored on the file server of Fig. 1; 

Fig. 7 is a flow diagram illustrating a method 
employed at the file server of Fig. 1 for responding to a 
request for data from a client; 

Fig. 8 is a flow diagram illustrating a method 
15 . employed at a client for decrypting encrypted data 
retrieved from the file server of Fig. 1; 

Fig. 9a depicts an access control list including a 
single access control list entry; 

Fig. 9b depicts an access control list including 
20 three access control list entries; 

Fig. 9c depicts an access control list including 
four access control list entries; 

Fig. 9d depicts an access control list including 
five access control list entries; 
25 Fig. 10a is an illustrative message payload 

including a 10 check value and a first decryption key and 
data encrypted with a first encryption key; 

Fig. 10b is an illustrative message payload 
including plural encrypted check values and first 
30 decryption keys and data encrypted with the first 
encryption key; 

Fig. 10c is another illustrative message payload 
including plural encrypted check values and first 
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decryption keys and data encrypted with the first 
encryption key; and 

Fig. lOd is another illustrative message payload 
including plural encrypted check values and first 
5 decryption keys and data encrypted with the first 

encryption key. 

DETAILED DESCRIPTION OF THE INVENTION 
Consistent with the present invention a method and 

10 apparatus are disclosed for storing data securely on a 

non-secure file server while allowing the data to be 
accessed by a plurality of authorized clients and/or 
groups. The system is depicted generally in Fig. 1 in a 
simplified block diagram. The system includes a 

15 plurality of clients 12, identified as clients Ca - Cn 
and a file server 14 communicatively coupled via a 
network 10. Additionally, certain embodiments of the 
system may include a group server 16 which is 
communicatively coupled to the network 10. 

20 The network 10 may comprise a local area network, a 

wide area network, the Internet or any other network for 
communicatively coupling the respective clients 12, the 
file server 14 and the group server 16. The clients 12 
are depicted generally in Fig. 2a and may comprise a 

25 computer or processing element, a personal digital 

assistant (PDA), an intelligent networked appliance, a 
controller or other device capable of storing and 
retrieving information to and from the file server 14. 
More specifically, the clients 12 typically include a 

30 processor 12a which is operative to execute programmed 

instructions out of an instruction memory 12b. The 
instructions executed in performing the functions herein 
described may comprise instructions stored within 
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program code considered part of the operating systems 
12e, instructions stored within program code considered 
part of an application 12f or instructions stored within 
program code allocated between the operating system 12e 
5 and the application 12f. The memory 12b may comprise 

random access memory or a combination of random access 
memory and read only memory. The clients 12 include a 
network interface 12d for coupling the respective client 
to the network 10 and may optionally include secondary 

10 storage 12c. 

The file server 14 is depicted generally in Fig. 2b 
and may comprise a storage subsystem in the. form of an 
intelligent hard disk array or any other data storage 
subsystem suitable for accessing data in response to 

15 requests issued to the file server 14 by clients 

communicably coupled to the file server 14 via the 
network 10. More specifically,- the file server 14 
typically includes a processor 14a which is operative to 
execute programmed instructions out of an instruction 

20 . memory 14b. The instructions executed in performing the 
file server functions herein described may comprise 
instructions stored within program code considered part 
of the file server operating systems 14e, instructions 
stored within program code considered part of a file 

25 server application 14 f or instructions stored within 

program code allocated between the file server operating 
system 14e and the file server application 14f. The 
memory 14b may comprise random access memory or a 
combination of random access memory and read only 

30 memory. The file server 14 includes a network interface 
14d for coupling the respective client to the network 10 
and includes secondary storage 14c for storing 
encrypted data forwarded from the clients 12 along with 
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associated access control lists as discussed hereinafter 
in greater detail. 

The group server 16 is generally depicted in Fig, 
2c. The group server 16 is eraployed in specific 
5 embodiments which support the distribution of encrypted 

data among groups having a plurality of clients or other 
groups as members. The group server 16 typically 
includes a processor 16a which is operative to execute 
programmed instructions out of an instruction memory 

10 16b. The instructions executed in performing the group 

server functions herein described may comprise 
instructions stored within program code considered part 
of the group server operating systems 16e, instructions 
stored within program code considered part of a group 

15 server application 14f or instructions stored within 

program code allocated between the file server operating 
system 16e and the file server application 16f. The 
memory 16b may comprise random access memory or a 
combination of random access memory and read only 

20 memory. The group server 16 includes a network 

interface 16d for coupling the respective client to the 
network 10 and includes secondary storage 16c for 
storing encrypted data forwarded from the clients 12 
along with associated access control lists as discussed 

25 hereinafter in greater detail. 

A first system for securely storing data on the 
file server 14 and securely distributing the data among 
clients 12 authorized to obtain access to the data is 
described below with reference to Figs. 1, 3a-3d and 4a- 

30 4d. When a client, such as client Ca, desires to store 

data on a non-secure file server, such as the file 
server 14, the client Ca encrypts the data with a first 
encryption key Ki© having a corresponding first 

-8- 
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decryption key Kia- For brevity, the first decryption key 
Kid appears as the key K within the braces in the Figures 
and the first encryption key appears as the key K 
outside of the braces and as a subscript- In a preferred 
5 embodiment, the first encryption key and the first 

decryption key comprise a single symmetric key although 
the first encryption key and the first decryption key 
may comprise public and private keys or a public key 
pair. For purposes of reference, the data to be stored 

10 on the file server 14 is referred to as data or file F. 

After encrypting the data F, the client Ca encrypts the 
first decryption key Kid with a second encryption key Kze 
having a corresponding second decryption key Kad known to 
the client Ca- In a preferred embodiment the second 

15 encryption key K2e comprises the public key of a public 

key pair owned by the client Ca. Thus, the encrypted 
first decryption key can only be decrypted by the client 
12 which owns or has access to the private key of the 
public key pair, which typically would be only client 

20 Ca. The encrypted data and the encrypted first 
decryption key Kid along with a client or group 
identifier are forwarded over the network 10 by the 
client 12 Ca for receipt by the file server 14. As 
illustrated in Fig. 3a, the file server 14 stores the 

25 received encrypted first decryption key along with the 

client identifier Ca in an access control list. The 
access control list may be stored separately from the 
associated encrypted data as depicted in Fig. 3a or 
alternatively, stored in a header along with the 

30 encrypted data file as illustrated in Fig. 4a. 

Since, in the present example, the first decryption 
key has been encrypted with only the second encryption 
key having a second decryption key owned by client Ca 
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only client Ca can presently obtain access to the 
encrypted data. The client Ca 12 may access the data 
stored on the file server 14 as follows. The client Ca 
issues a request to the file server 14 to access the 
5 data. In the present embodiment, the file server 14 

compares the client identifier Ca to the client 
identifiers stored within the access control list as 
depicted in Fig. 3a. Since the client identifier of the 
client 12 issuing the request to the file server 14 

10 matches the client identifier Ca in the access control 

list, the file server 14 retrieves the corresponding 
encrypted first decryption key (encrypted with the 
public key of client Ca) and returns the encrypted first 
decryption key along with the encrypted data to the 

15 client Ca- The client Ca/ upon receipt of the encrypted 

first decryption key Kid (which was, encrypted with the 
client Ca's public key), and the encrypted data, 
decrypts the encrypted first decryption key Kid to 
obtain the unencrypted first decryption key and then 

20 decrypts the data F using the first decryption key. In 
this manner, the data F may be securely stored on the 
file server 14 and retrieved by the client 12 that 
initially stored the data. While in the above example, 
the file server 14 compared the client identifier of the 

25 client requesting the data to the client identifier 

within the access control list to identify the encrypted 
first decryption key to be returned, the file server 14 
may return to the requesting client the entire access 
control list. 

30 In many circumstances, it is desirable to be able 

to have one client 12 store data on the file server 14 
while allowing other authorized clients 12 to access the 
data. The following example illustrates key 
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distribution mechanisms which allow keys to be 
distributed so that encrypted data stored on a non- 
secure file server 14 may be accessed by a number of 
authorized clients 12 and group members. 
5 Referring to Figs. 3b and 4b, and continuing with 

example depicted in Figs. 3a and 4a, assume that client 
Ca desires' to permit clients Cb and Cc access to the 
encrypted data F stored on the file server 14 by the 
client Ca. In this circumstance, the client Ca 

10 retrieves the access control list for the encrypted data 

F stored on the file server 14, obtains the first 
decryption key by decrypting the encrypted first 
decryption key and encrypts the first decryption key Kid 
with each of the public keys of the public key pairs of 

15 clients 12 Cb and Cc- The client Ca then appends the 

additional encrypted first decryption keys to the access 
control list along with the client identifiers for the 
respective encrypted first decryption keys as depicted 
in Fig. 3b. The modified access control list is 

20 forwarded by the client Ca to the file server 14 and the 

modified access control list is stored on the file 
server 14 as indicated in Fig. 3b. Alternatively, the 
modified access control list is stored as a header in 
conjunction with the encrypted data F as depicted in 

25 Fig. 4b. In response to a request to access the data F 

from any one of the authorized clients Ca, Cb or Cc / the 
file server compares the client identifier of the 
requesting client and returns the applicable encrypted 
first decryption key along with the encrypted data F or 

30 alternatively, returns to the requesting client the 

entire access control list as it then exists along with 
the encrypted data F. If a single encrypted first 
decryption key is returned, the requesting client 12 
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decrypts the encrypted first decryption key with the 
private key of its public key pair and utilizes the 
decrypted first decryption key to decrypt the encrypted 
data F. If the entire access control list is returned 
5 to the requesting client, the requesting client compares 

its client identifier to the client identifiers within 
the access control list to select the applicable 
encrypted first decryption key to be employed in the 
data decryption process. In the above-described manner, 

10 the client 12 that initially stored the encrypted data F 

has added to the access control list encrypted 
decryption key entries which allow other authorized 
clients to decrypt the stored data. 

Continuing with the present example, and as 

15 depicted in Figs. 3c and 4c, clients 12 that are 

authorized to access the data F may authorize other 
clients 12 to access the data F. For example, assume 
that client Cc/ which has been authorized to access the 
encrypted data F, desires to add client Cd to the access 

20 control list so that client Cd is authorized to access 

the encrypted data F. In this circumstance, as 
described above, client Cc retrieves the access control 
list associated with the data F. Client Cc then 
retrieves the unencrypted first decryption key by 

25 decrypting the encrypted first decryption key that had 

been encrypted utilizing Cc's public key. Client Cc then 
encrypts the first decryption key using client Cd's 
public key. After encrypting the first decryption key 
with client Cd's public key, the client identifier Cd and 

30 the encrypted first decryption key for client Cd is 

appended to the access control list and the modified 
access control list is forwarded to the file server 14. 
The modified access control list is stored on the file 

-12- 
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server 14 as depicted in Fig. 3c or alternatively, in 
conjunction with the encrypted data as depicted in Fig. 
4c. 

In response to a request to access the encrypted 
5 data F initiated by client Ca, the file server returns to 

the client Cd either the applicable encrypted first 
decryption key which was encrypted using client Ca 's 
public key along with the encrypted data F or 
alternatively, the entire current access control list 

10 along with the encrypted data F as discussed above. It 

should be noted that the access control list may be 
modified by appending the new entries to the list rather 
than forwarding the entire modified access control list 
to the file server 14 for storage . 

15 Groups of clients 12 may also be authorized to 

obtain access to the encrypted data F stored on the file 
server 14. For example, referring to Fig. 1 assume that 
a group Gi is composed of clients Ce and Cf. Member 
clients 12 belonging to the group Gi may be provided 

20 access to the encrypted data F stored on the file server 

14 as described below. The group Gi is provided with a 
public key pair comprising a group public key and a 
group private key. In a first embodiment for servicing 
groups of clients, each of the member clients within the 

25 group Gi is provided with the group private key so that 

each group member can decrypt information encrypted 
using the group public key. A client or a client member 
of a group previously authorized to obtain access to the 
encrypted data F may add the group Gi to the access 

30 control list in the manner previously described. More 

specifically, continuing with the prior example, assume 
that client Cd desires to add group Gi to the access 
control list. In this circumstance, client Ca retrieves 

-13- 
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either its own encrypted first decryption key, or 
alternatively, retrieves the then current access control 
list from the file server 14. The client Cd decrypts the 
encrypted first decryption key to obtain the unencrypted 

5 first decryption key and encrypts the first decryption 

key using the public key of the group Gi. The first 
decryption key encrypted with the public key of group Gi 
is then appended to the access control list and the 
modified access control list is forwarded to the file 

0 server 14. Alternatively, the client Cd may forward to 

the client server 14 the encrypted first decryption key 
for the group Gi to be appended to the access control 
list as depicted in Fig. 3d or stored in conjunction 
with the encrypted data F as illustrated in Fig. 4d. In 

5 response to a request to access the file from a client 

12 which is a member of the group Gi, the file server 
returns the applicable encrypted first decryption key 
for the group along with the encrypted data F or 
alternatively, returns the entire access control list 

0 along with the encrypted data F as discussed above. The 

requesting client which is a member of the group Gi, can 
decrypt the encrypted first decryption key to obtain the 
unencrypted first decryption key using the group private 
key and then decrypt the encrypted data F using the 

5 unencrypted first decryption key. 

While the provision of the group private key to the 
group members has certain advantages in terms of 
processing efficiency, this approach also has certain 
disadvantages. In particular, if a group member ceases 

0 to be a member of the group, the public key pair for the 

group would need to be modified to prevent the former 
group member from accessing the files based upon the 
clients former membership in the group. Additionally, 

-14- 
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access control list entries for the group would need to 
be re-encrypted such that the list would contain the 
first decryption key encrypted with the new group public 
key. 

5 In another embodiment which is operative to service 

requests for files from members of a group, a group 
server 16 depicted in Fig. 1 is employed to decrypt an 
encrypted copy of the first encryption key. A client 12 
or group server 16 encrypts the first decryption key 

10 with the public key of the group server 16 and modifies 
the access control list or the header of the encrypted 
data stored on the file server 14 to include the group 
identifier and the encrypted first decryption key as 
depicted in Figs 3d or 4d. In response to a request 

15 from a client 12 group Gi member for access to data 

stored in encrypted form on the file server 14, the file 
server 14, as described above, returns the encrypted 
data to the requesting client 12 group Gi member along 
with either the encrypted first decryption key 

20 (encrypted with the group server public key) for the 

group Gi or alternatively, returns to the requesting 
client 12 group member the entire access control list. 
The requesting client 12, upon receipt of the encrypted 
key or the access control list, forwards at least the 

25 encrypted first decryption key for the group Gi 
(encrypted with the group server 16 public key) to the 
group server 16. The group server 16 then determines 
whether the client that forwarded the encrypted first 
decryption key for decryption is a member of the 

30 respective group. If the client that forwarded the 

request is not a member of the group, the group server 
16 does not proceed with the decryption of the encrypted 
first decryption key. If the client that forwarded the 

-15- 
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request is a member of the group, the group server 16 
decrypts the encrypted first decryption key with the 
group server private key to obtain the unencrypted first 
decryption key. The group server 16 then forwards the 
5 first decryption key to the group member via a secure 

channel. The secure channel may comprise a physically 
secure channel or alternatively may comprise an 
encrypted message forwarded to the respective client 
over a non-secure communications link. For example, the 

10 group server 16 may encrypt the first decryption key 
with the public key of the respective client 12 or 
alternatively with a symmetric key shared between the 
group server 16 and the respective client 12. If the 
first decryption key is encrypted with the public key of 

15 the client 12, only the client 12 having the 

corresponding private key can decrypt the encrypted 
first decryption key which was encrypted with respective 
clients public key. Upon receipt and decryption of the 
encrypted first decryption key, the client that 

20 initiated the request . for data can utilize the 

unencrypted first decryption key to decrypt the 
encrypted data retrieved from the file server 14. The 
utilization of a group server 16 to perform decryption 
and forwarding of the first decryption key to the client 

25 group member that requested data from the file server 14 

avoids the need to assign a new public key pair in the 
event that a client ceases to be a group member and 
additionally, avoids the need to update the access 
control list should a group member exit the group. It 

30 should also be noted that a symmetric key may be 

employed between the group server 16 and a client group 
member to establish the secure channel over the non- 
secure communications link. 
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The method employed at a client 12 to store data on 
the non-secure file server 14 while using non-encrypted 
client and group identifiers to identify encrypted first 
decryption keys in the access control list is 
5 illustrated in Fig. 5. Referring to Fig. 5, the client 

12 (or group member) first obtains the data to be 
stored on the non-secure file server 14 as illustrated 
in step 20. The data may comprise a file generated by 
the client, such as a text file or any other file 

10 generated by the client 12, a database, information 

obtained by the client 12 from another client, or any 
other form of information or data that the client 
desires to store on the non-secure file server 14. The 
client 12 next encrypts the data to be stored on the 

15 file server 14 with a first encryption key having an 

associated first decryption key as illustrated in step 
22. The client 12 also encrypts the first decryption 
key with a second encryption key having an associated 
second decryption key known to the respective client or 

20 group as depicted in step 24. A first key identifier is 

associated with the encrypted first decryption key as 
shown in step 26. In the event the client 12 is storing 
the data for its own decryption, the key identifier 
would correspond to the respective client 12 identifier; 

25 i.e. if the client Ci is storing the encrypted data on 

the non-secure file server for its own retrieval, the 
client Ci associates the key identifier Ci in 
unencrypted form with the encrypted first decryption key 
encrypted with the client Ci second encrypted key. The 

30 client Ci may encrypt the first encryption key with its 

own public key and use its own client identifier Ci as 
the key identifier. In the event the data is first to 
be stored in the file server 14 on behalf of a group Gi, 
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the group member or group server that is storing the 
data on the file server 14 encrypts the first decryption 
key with a second encryption key having an associated 
second decryption key which is either published to the 
5 group members or alternatively, retained by the group 

server 14, The client 12 or group server 16 associates 
the group key identifier Gi with the encrypted first 
decryption key and forwards the key identifier, the 
encrypted first decryption key and the encrypted data to 
10 the file server 14 for storage as illustrated in step 

28. 

Fig. 6 illustrates the method for modifying the 
access control list that is employed at a client (or 
group server if applicable) authorized to obtain access 

15 to the encrypted data stored on the non-secure file 

server 14. Assume that a first client 12 that is 
authorized to access the stored data desires to 
authorize a second client to access the stored data. As 
depicted in step 40, the first client 12 that is 

20 authorized to access the stored data obtains the 

encrypted first decryption key associated with its key 
identifier. This may occur in a number of ways. If 
the first client 12 is in possession of the first 
decryption key the first client need not obtain the 

25 encrypted first decryption key from the file server 14. 

In the event the first client 12 does not have the 
encrypted first decryption key in its possession, or as 
a default, the first client 12 may request that the 
encrypted first decryption key associated with the first 

30 client's key identifier be returned from the file server 

14. Alternatively, the first client 12 may request that 
the then existing access control list (which includes 
the encrypted first encryption key encrypted with the 
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first clients second encryption key) be returned from 
the file server 14. The objective of this step is 
simply to obtain at the first client a copy of the 
unencrypted first encryption key. If the first client 
5 12 retrieves an encrypted copy of the first encryption 

key from the file server 14, the client 12 decrypts the 
respective encrypted first decryption key with its 
second decryption key to obtain the unencrypted first 
decryption key. As previously discussed, the second 

10 encryption and decryption keys are preferably the 
respective public and private keys of the public key 
pair owned by the respective client 12. Alternatively, 
symmetric keys may be employed which are shared among 
the clients 12 that are authorized to access the stored 

15 data and authorized to modify the access control list. 

After obtaining the unencrypted first decryption 
key, the first client 12 that desires to modify the 
access control list obtains a second encryption key of a 
second client 12 to be provided access to the stored 

20 data. The second client 12 second encryption key has an 

associated second client second decryption key. As 
discussed above, the second client 12 second encryption 
key and second decryption key are preferably public and 
private keys of a public key pair owned by the added 

25 client. The first decryption key is encrypted by the 
first client 12 using the second encryption key of the 
second client as depicted in step 42. The second 

client key identifier is then associated with the second 
client's encrypted first decryption key as depicted in 

30 step 44. Thereafter, the second client key identifier 
and the second client's encrypted first decryption key 
are appended to the access control list as illustrated 
in step 46. This information may be appended to the 
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access control list in a number of ways. For example, 
the access control list may be retrieved by the first 
client and the first client may append the second client 
key identifier and encrypted first decryption key 
5 information to the prior access control list to form the 

modified access control list. Alternatively, the new key 
identifier and encrypted first decryption key may be 
forwarded to the file server 14 and such information may 
be added to the access control list by the file server 

10 14 in response to a request issued by the first client, 

Finally, if the access control list is stored as a 
header to the encrypted data stored on the file server 
14, the header is modified to correspond to the modified 
access control list. Thus, any client that is 

15 authorized to access the data stored on the non-secure 
file server 14 may modify the access control list to 
authorize other clients or groups to access the stored 
data. 

Fig. 7 illustrates the operation of the file server 
20 14 in response to a request for stored data from a 

client 12 authorized to access such data. As indicated 
• in step 60, a client authorized to access data stored on 
the non-secure file server 14 issues a request to the 
file server 14 to retrieve the data. In response, the. 
25 file server 14 retrieves the encrypted data and at 

least the encrypted first decryption key associated with 
the requesting client 12 as shown in step 62. More 
specifically, the file server 14, upon receipt of the 
request for data, may retrieve the data along with the 
30 relevant encrypted first decryption key by retrieving 

from the access control list the key associated with the 
client or group identifier that issued the request. By 
retrieving only the needed key with the encrypted data 
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and forwarding only the needed key to the requesting 
client 12, network bandwidth is conserved. 
Alternatively, the file server 14, in response to a 
request for data, may retrieve the entire access control 
5 list and return the entire access control list and the 

encrypted data to the client. In either case, the file 
server 14 forwards to the client 12 that issued the 
request for the data the encrypted data along with at 
least the relevant encrypted first decryption key as 

10 depicted in step 64. 

Prior to forwarding the encrypted data and the 
encrypted first decryption key to a requesting client 
the file server 14 may perform a test to authenticate 
the client and ascertain whether the requesting client 

15 is included on the access control list. If the client 

is not included on the access control list, the file 
server may decline to return to the requesting client 
the encrypted data and/or the encrypted first decryption 
keys . 

20 Fig. 8 illustrates the operation of a client 12 

that desires to retrieve data stored on the non-secure 
file server 14. As illustrated at step 80, the client 
12 (e.g. client Cb or a group member such as Cg in group 
Gi) that desires to retrieve data from the file server 

25 14 issues a request to the file server for the 

particular data. Typically, the request will be in the 
form of a request to access data having a known file 
name. As illustrated in step 82, in response to the 
request, the requesting client receives from the file 

30 server 14 at least one encrypted decryption key for 

decrypting the encrypted data along with the encrypted 
data. As discussed above with respect to Fig. 7, the 
client 12 that issued the request may receive a single 
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encrypted first decryption key (if the file server 
parses the request to identify the needed key from the 
received access control list) or alternatively, the full 
access control . list (in which case, the requesting 
5 client identifies the needed key) . Additionally, as 

discussed above, if the requesting client is a member of 
a group, the encrypted key or access control list, as 
applicable, may be forwarded to the group server 16 for 
decryption of the relevant encrypted first decryption 

10 key and the unencrypted first decryption key securely 

communicated to the respective group member. The 
requesting client 12 or group member thus obtains an 
unencrypted copy of the first decryption key as depicted 
in step 84 and the unencrypted first decryption key is 

15 utilized to decrypt the encrypted data as shown in step 

86. 

In the embodiments described above, the client and 
group identifiers stored in the access control list or 
data header on the file server 14 are stored in 

20 unencrypted form or, as referred to in the trade, "in 

the clear". Thus, the file server 14 and users having 
access to the file server can access the identity of the 
clients and groups that are authorized to access given 
data even if such users cannot access the encrypted data 

25 and encrypted key associated with the respective 

identifiers. In certain environments it may be 

desirable to preclude the file server and unauthorized 
users from obtaining even client and group identifying 
information. To prevent access to client and group 

30 identifiers while still permitting secure storage of 

data on a non-secure file server, variations of the 
above-described techniques are employed. ' These 
embodiments are described with respect to access 
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control list examples illustrated in Figs. 9a through 9d 
and message payload data illustrated in Figs. 10a 
through lOd. 

By way of example, assume that client Ca desires 
5 to store data on the non-secure file server 14. The 

client Ca encrypts the data with a first encryption key 
having an associated first decryption key. As discussed 
above, the first encryption and decryption keys are 
preferably a symmetric key, but a public key pair may be 

10 employed. The client Ca appends the unencrypted first 

decryption key "K" to an unencrypted client identifier 
or unencrypted check value "X" and encrypts the data 
stream {XK) with a second encryption key having an 
associated second decryption key known to client Ca- The 

15 second encryption key in a preferred embodiment is the 

public key of a public key pair owned by the client Ca. 
The value X may be the client identifier (or group 
identifier) . for the client Ca storing the data or 
alternatively^ a secret value or a value known to the 

20 client Ca- For purposes of illustration in the present 

example it will be assumed that the value X is the 
client identifier Ca and the client identifier occupies 
a predetermined number of bytes. The encrypted data 
stream along with the encrypted data is forwarded by the 

25 client Ca to the file server 14. The encrypted data 

stream {XA} is stored in an access control list as 
depicted in Fig. 9a and associated with the stored 
encrypted data. Alternatively, the encrypted data 
stream is stored as a header to the encrypted data as 

30 depicted in Fig. 10a. 

In response to a request from the client Ca to read 
the data stored on the file server 14, the file server 
returns the access control list for the encrypted data 
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along with the encrypted data. The client Ca then 
attempts to decrypt each encrypted data stream in the 
access control list with its second decryption key, 
which, in the present example, comprises the private key 
5 of client Ca- In the initial example depicted in Fig 9a 

the access control list includes a single entry. After 
decrypting the encrypted data stream with client Ca*s 
second decryption key, client Ca strips off an initial 
predetermined number of bytes from the decrypted data 

10 stream and compares the initial byte value to the client 

identifier for the client Ca. If the values compare, 
the data which follows is the unencrypted first 
decryption key. The first decryption key is then used 
to decrypt the encrypted data that was retrieved from 

15 the file server. If the values do not compare, the 

remaining encrypted data streams in the access control 
list are decrypted using the respective second 
decryption key to determine which data stream includes 
the first decryption key that was encrypted with the 

20 respective client's second encryption key. Upon 

decrypting the proper data stream, the first encryption 
key is used to decrypt the encrypted data. It is noted 
that the present, embodiment in which group identifiers 
are not in the clear is more compute intensive since the 

25 encrypted data streams must be sequentially decrypted to 
locate the data stream that was initially encrypted 
using the respective client's second encryption key. 
Additionally, as discussed hereinafter, the situation is 
more complex when the access control list includes an 

30 encrypted data stream which may only be decrypted by a 

group server. 

By way of further example, assume that client Ca 
desires to authorize clients Cb and Cc to access the 
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encrypted file. This is accomplished by modifying the 
access control list. More particularly, the client Ca 
obtains the first decryption key. If the first 
decryption key has not been retained within the client 
5 Ca/ client Ca retrieves the access control list from the 

^ file server 14 and decrypts the entries in the access 
control list with client Ca's second decryption key 
until the entry encrypted with client Ca's second 
encryption key is located. After decrypting the data 

10 stream {XK} that includes the value X which corresponds 

to the client's identifier, the corresponding first 
decryption key is used by the client Ca to generate new 
data stream entries for inclusion in a modified access 
control list. In particular, referring to Fig. 9b, the 

15 first decryption key (K) is appended to the client 

identifier for client Cb (X) and the combined data 
stream is encrypted with the second encryption key for 
the client Cb . Additionally, the first decryption key 
(K) is appended to the client identifier for client Cc 

20 (X) and the combined data stream is encrypted with the 

second encryption key for the client Cc. The encrypted 
data streams are then added to the access control list 
as shown in Fig. 9b or included in the header of the 
encrypted data as illustrated in Fig. 10b. 

25 In the event one of the clients 12 authorized to 

access the data stored in. encrypted form on the file 
server 14 issues a request to the file server 14 to 
access the data, the file server returns the entire 
access control list along with the encrypted data. The 

30 requesting client 12 decrypts each successive encrypted 

data stream and tests the decrypted value X against its 
own client identifier (or check value) to identify the 
first decryption key that was encrypted with the 
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respective client's second encryption key. The first 
decryption key is then used, to decrypt the encrypted 
data . 

Any client 12 that is authorized to access the data 
5 stored on the file server 14 can authorize another 

client 12 to access the stored data. For example, 
referring to Figs. 9c and 10c, any of clients Ca, Cb and 
Cc can modify the access control list to authorize 
client Cd to access the stored data as described above 

10 with respect to Figs- 9b and 10b. 

Groups of clients may also be authorized to access 
data stored on the non-secure file server 14 without 
using un-encrypted group identifiers. Assume that 
client Cc desires to authorize group Gi to access the 

15 encrypted data stored on the file server 14. In such 

event, client Cc obtains the first decryption key as 
discussed above. Client Cc then appends the first 
decryption key to the group identifier Gi to form a data 
stream, encrypts the data stream with a second 

20 encryption key which has a corresponding second 

decryption key owned by the group Gi. In a preferred 
embodiment, the second encryption key comprises the 
public key of the group Gi and the second decryption key 
comprises the private key of the group Gi. The second 

25 decryption key for the group Gi may be distributed among 

the members of the group or alternatively, retained by a 
group server such as group server 16. The encrypted 
data stream is added to the access control list as 
depicted in Fig. 9d or alternatively, included the 

30 header of the encrypted data as depicted in Fig. lOd. 

In the event the group Gi members are provided with the 
group Gi second decryption key, . a group member retrieves 
the stored data as follows. Assume group Gi includes 
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* clients Ce and Cf. In the event client Cf issues a 
request to the file server 14 for the stored data^ the 
file server 14 returns the entire access control list 
(e.g. the access control list depicted in Fig, lOd) 
5 along with the encrypted data. Client Cf may not be 

authorized to access the file individually, but may be 
authorized to access the data as a member of the group 
Gi. In such event, the client Cf attempts to decrypt 
the data streams within the retrieved access control 

10 list using its client second decryption key. In such 

event, none of the values X will match the client Cf 
identifier following decryption of the data streams. 
The client Cf may then attempt to decrypt the encrypted 
data streams within the access control list using the 

15 group Gi second encryption key. This effort will result 

in the identification of the group identifier Gi within 
one of the decrypted data streams • Upon identifying the 
group identifier Gi client Cf uses the associated first 
decryption key to decrypt the encrypted data. 

20 To avoid the problems discussed above with respect 

to the distribution of the group second decryption key, 
instead of distributing the group second decryption key 
to the group members, the key may be retained by the 
group server 14. If the client Cf is unable to decrypt 

25 an encrypted data stream within the access control list 
using its own second decryption key (e.g. the client Cf 
private key) , client Cf forwards the access control list 
to the group server 14 which attempts to decrypt the 
encrypted data streams within the access control list 

30 using the group server second decryption key (e.g. the 

group Gi private key) . Upon recognizing the group Gi 
identifier, the. group server extracts the first 
decryption key from the applicable data stream and 
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forwards the first decryption key via a secure channel 
to the client Cf that issued the initial request for the 
data stored on the non-secure file server 14. The first 
decryption key may be forwarded over a secure physical 
5 channel or alternatively, may be encrypted with an 

encryption key having an associated decryption key known 
to the client Cf. The client Cf may then utilize the 
first decryption key obtained from the group server 16 
to decrypt the encrypted data. 

10 While in the above example, client Cf attempted to 

decrypt the data streams within the retrieved access 
control list before forwarding the list to the group 
server 16, it should be appreciated that the client Cf 
may forward the access control list initially to the 

15 group server 14 and not initiate decryption of data 

streams within the retrieved access control list until 
results are first received from the group server 16. 
Alternatively, the client Cf may initiate decryption of 
the data streams within the retrieved access control 

20 list with its own second decryption key while forwarding 

the access control list to the group server 16 for 
decryption of the data streams within the access control 
list in parallel* In this manner, the average time to 
obtain the first decryption key, and thus, to decrypt 

25 the encrypted data may be reduced. 

The above described examples illustrate the use of 
encrypted client and group identifiers. As mentioned 
above, a password or known check value may be employed 
as the value X to which the first decryption key is 

30 appended. The known value will only be generated by a 

client decrypting the data stream with a second 
decryption key for which the respective data stream was 
encrypted using the corresponding second encryption key. 
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While in the above-described embodiments, the file 
server 14 transmits encrypted information to a client in 
response to a request issued by the respective client, 
it should be appreciated that the file server may 
5 transmit such information in the absence of a specific 

request from a particular client* For example, the file 
server 14 may periodically transmit encrypted 
information along with one or more of the access control 
list entries to one or more of the clients 12. 

10 Additionally, such transmission may occur on a non- 
periodic basis in response to specified events. 

Those skilled in the art should readily appreciate 
that computer programs operative to perform the 
functions herein described can be delivered to a client, 

15 or file server or group server in many forms; including, 

but not limited to: (a) information permanently stored 
in a non-writable storage media (e.g. read-only memory 
devices within a computer such as ROM or CD-ROM disks 
readable by a computer I/O attachment); (b) information 

20 alterably stored on writable storage media (e.g. floppy 

disks, tapes, read/write optical media and hard drives); 
or (c) information conveyed to a computer through a 
communication media, for example, using baseband or 
broadband signaling techniques, such as over computer or 

25 telephone networks via a modem. In addition, it should 

be appreciated that the presently described methods may 
be implemented in software executing out of a memory on 
respective client, file or group server processors. 
Alternatively, the presently described functions may be 

30 embodied in whole or in part using hardware components 

such as Application Specific Integrated Circuits 
(ASICs), state machines, controllers or other hardware 
components or devices, or a combination of hardware 
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components and software processes without departing from 
the inventive concepts herein described. 

Those of ordinary skill in the art should further 
appreciate that variations to and modifications of the 
5 above-described methods and systems for granting access 

to a computer resource may be made without departing 
from the inventive concepts disclosed herein. 
Accordingly, the invention should be viewed as limited 
solely by the scope and spirit of the appended claims. 
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CLAIMS 

What is claimed is: 

1. A method of operation at a file server comprising: 
5 accessing at said file server (i) information 

encrypted with a first encryption key and (ii) an entry 
from an access control list, said entry being associated 
with said encrypted information and a client authorized 
to read and modify said encrypted information, wherein 

10 said entry comprises a first decryption key encrypted 

with a second encryption key and wherein said first 
decryption key is usable to decrypt said encrypted 
information; and 

transmitting to said client said encrypted 

15 information and said entry. 

2. The method of claim 1 further comprising prior to 
said accessing step: 

storing said information encrypted with said first 
20 encryption key on said file server; and 

storing said entry on said file server, 

3. The method of claim 1 wherein said transmitting step 
comprises the step of transmitting said encrypted 

25 information and said entry in response to a request from 

said client. 

4. The method of claim 1 wherein said transmitting step 
comprises the step of transmitting to said requesting 

30 client said access control list. 

5. The method of claim 1 wherein said first encryption 
key and said first decryption key are symmetric. 
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6. The method of claim 1 wherein said first encryption 
key comprises one of a public key and a private key of a 
first public/private key pair and said first decryption 

5 key comprises the other of said public key and said 

private key of said first public/private key pair. 

7. The method of claim 2 wherein said step of storing 
said entry on said file server includes the step of 

10 storing in association with said entry an unecrypted 

identifier associated with said client - 

8. The method of claim 2 wherein said step of storing 
said entry on said file server comprises the step of 

15 storing an access control list, wherein said entry 

comprises one entry of a plurality of entries within said 
access control list, and said entry includes said first 
decryption key combined with a check value to form a data 
stream, wherein said data stream is encrypted with a 

20 second encryption key associated with said client; and 

said transmitting step comprises the step of 
transmitting to said requesting client said encrypted 
information and said access control list- 

25 9. The method of claim 8 wherein said check value 

comprises a value known to said client. 

10. The method of claim 8 wherein said check comprises 
an identifier associated with said client. 

30 

11. The method of claim 10 wherein said identifier 
comprises a client identifier that serves to identify 
said client; 
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12. The method of claim 8 wherein said identifier 
comprises a group identifier that identifies a group of 
which said client is a member. 

5 

13. A. method for securely storing information on a file 
server and distributing the stored information, said 
method comprising: 

encrypting information at one of a plurality of 
10 clients in communication with said file server, said 

information being encrypted with a first encryption key 
having an associated first decryption key; 

encrypting said first decryption key with a second 
encryption key for each of said plurality of clients 
15 authorized to read and modify said information, wherein 

each respective one of said second encryption keys has a 
corresponding second decryption key retained by the 
respective one of said plurality of clients; 

storing said encrypted information on said file 
20 server and storing on said file server said encrypted 

first decryption keys as a plurality of entries within an 
access control list, wherein each one of said entries is 
associated with one of said plurality of clients; 

forwarding to at least a selected one of said 
25 plurality of clients said encrypted information and at 

least one of said entries; 

decrypting said encrypted first decryption key 
contained in said at least one of said entries utilizing 
the second decryption key corresponding to the second 
30 encryption key for the respective entry; and 

decrypting said encrypted information using said 
first decryption key to obtain said information. 
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14. The method of claim 13 wherein said forwarding step 
comprises the step of forwarding said encrypted 
information and said at least one of said entries to said 
selected one of said plurality of clients in response to 

5 a request received at said file server from said selected 

one of said plurality of clients. 

15. The method of claim 14 wherein said request includes 
a client identifier associated with said selected one of 

10 said plurality of clients, said entries each include a 

client identifier associated with one of said plurality 
of clients, and wherein said forwarding step includes the 
step of forwarding to at least said selected one of said 
plurality of clients the said entry including the client 

15 identifier associated with the client identifier 

contained within said request. 

16- The method of claim 13 wherein said forwarding step 
comprises the step of forwarding to said selected one of 
20 said plurality of clients said encrypted information and 

said access control list. 

17. The method of claim 17 wherein said first encryption 
and decryption keys are symmetric. 

25 

18. The method of claim 13 wherein said second 
encryption and decryption keys are symmetric. 

19. The method of claim 13 wherein said first encryption 
30 key comprises one of a public key and a private key of a 

first public/private key pair and the first decryption 
key comprises the other of said public key and said 
private key of said first public/private key pair. 
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20. A method for storing information securely on a file 
server for access by members of a group, said method 
comprising the steps of: 
5 identifying the members of said group, wherein said 

group has a group identifier, 

encrypting information with a first encryption key 
having an associated first decryption key; 

encrypting said first decryption key with a group 
10 encryption key having an associated group decryption key 

for decrypting data encrypted with said group encryption 
key; and 

storing said encrypted information on said file 
server and storing said encrypted first decryption key on 
15 said file server within an access control list associated 
with said encrypted information and containing, at least 
at some times, a plurality of encrypted first decryption 
keys. 

20 21. A method for accessing information securely stored 
on a file server for access by members of a group, said 
method comprising: 

identifying the members of said group, wherein said 
group has a group identifier, 

25 encrypting information with a first encryption key 

having an associated first decryption key; 

encrypting said first decryption key with a group 
encryption key having an associated group decryption key 
for decrypting data encrypted with said group encryption 

30 key; 

storing said encrypted information on said file 
server and storing said encrypted first decryption key on 
said file server within an access control list associated 
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with said encrypted information and containing, at least 
at some times, a plurality of encrypted first decryption 
keys. 

in response to a request received at said file 
5 server from one of said members of said group, forwarding 

. to said one of said members of said group said encrypted 
information and at least said encrypted first decryption 
key encrypted with said group encryption key; 

in a first decrypting step, decrypting said 
10 encrypted first decryption key with said group decryption 

key to obtain said first decryption key; and 

in ' a second decrypting step, decrypting said 
encrypted information using said first decryption key to 
obtain said information. 

15 

22. The method of claim 21 wherein said method further 
includes the step of distributing said group decryption 
key to said members of said group and said first 
decrypting step comprises the step of decrypting the 

20 encrypted first decryption key by said one of said 

members of said group using the distributed group 
decryption key. 

23. The method of claim 21 wherein said first decrypting 
25 step comprises the steps of: 

forwarding said encrypted first decryption key to a 
group server associated with said group identifier; 

decrypting said encrypted first decryption key at 
said group server. using said group decryption key; and 
30 forwarding said first decryption key to said one of 

said group members. 
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24. The method of claim 23 wherein said step of 
forwarding said first decryption key to said one of said 
group members comprises the step of forwarding the first 
decryption key to said one of said group members over a 

5 secure channel. 

25. The method of claim 24 wherein said secure channel 
is a physically secure channel. 

10 26. The method of claim 24 wherein said secure channel 

comprises a non-secure communications path and said step 
of forwarding the first decryption key to said one of 
said group members over a secure channel comprises the 
steps of: 

15 encrypting said first decryption key with a third 

encryption key having an associated third decryption key 
known to said one of said group members; 

forwarding to said one of said group members said 
encrypted first decryption key encrypted with said third 
20 encryption key; and 

decrypting by said one of said group members, said 
encrypted first decryption key encrypted with said third 
encryption key using said third decryption key. 

25 27. The method of claim 26 wherein said third encryption 

key comprises a public key of a member public/private key 
pair and wherein said third decryption key comprises the 
member private key of said member public/private key 
pair. 

30 

28. The method of claim 26 wherein said third encryption 
and decryption keys are symmetric. 
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29. The method of claim 21 wherein said first encryption 
and decryption keys are symmetric. 

30, The method of claim 21 wherein said first encryption 
5 key comprises one of a public key and a private key of a 

first public/private key pair and the first decryption 
key comprises the other of said public key and said 
private key of said first public/private key pair. 



10 31. A method for accessing information stored securely 

on a file server 

forwarding to said file server a request for 
information from a client; 

in response to said request, receiving from said 

15 file server said information encrypted with a first 

encryption key having an associated first decryption key 
and at least one access control list entry associated 
with a client authorized to read and modify said 
information, said received at least one entry including 

20 said first decryption key encrypted with a second 

encryption key having an associated second decryption 
key; 

decrypting said encrypted first decryption key using 
said second decryption key to obtain said first 
25 decryption key; and 

decrypting said encrypted information using said 
first decryption key. 



32. The method of claim 31 wherein said first encryption 
30 and decryption keys are symmetric. 

33. The method of claim 31 wherein said first encryption 
key comprises one of a public key and a private key of a 
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first public/private key pair and the first decryption 
key comprises the other of said public key and said 
private key of said first public/private key pair. 

5 34- The method of claim 31 wherein said second 

encryption key comprises a public key of a member 
public/private key pair and said second decryption key 
comprises the private key of said member public/private 
key pair. 

10 

35. A computer program product including a computer 
readable medium, said computer readable medium having a 
file server computer program stored thereon, said file 
server computer program for execution in a computer and 

15 comprising: 

program code for storing on said file server 
information encrypted with a first encryption key having 
a corresponding first decryption key; 

program code for storing on said file server an 

20 access control list, said access control list including 
at least one entry, said at least one entry including 
said first decryption key encrypted with a second 
encryption key associated with one of a plurality of 
clients authorized to read and modify said information 

25 and having access to a second decryption key associated 
with said second encryption key; and 

program code for transmitting to said one of said 
plurality of clients said encrypted information and said 
at least one entry. 

30 

36. A computer data signal, said computer data signal 
including a computer program for use in accessing 
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encrypted information stored on a file server, said 
computer program comprising: 

program code for storing on said file server 
information encrypted with a first encryption key having 
5 a corresponding first decryption key; 

program code for storing on said file server an 
access control list, said access control list including 
at least one entry, each of said at least one entry 
including said first decryption key encrypted with a 
10 second encryption key associated with one of a plurality 

of clients authorized to read and modify said information 
and having access to a second decryption key associated 
with said second encryption key; and 

program code for transmitting to said one of said 
15 plurality of clients said encrypted information and said 
at least one entry. 

37. Apparatus for accessing encrypted data stored on a 

file server comprising: 
20 means for storing on said file server information' 

encrypted with a first encryption key having a 

corresponding first decryption key; 

means, for storing on said file server an access 

control list, said access control list including at least 
25 one entry, said at least one entry including said first 

decryption key encrypted with a second encryption key 

associated with one of a plurality of clients authorized 

to read and modify said information and having access to 

a second decryption key associated with said second 
30 encryption key; and 

program code for transmitting to said one of said 

plurality of clients said encrypted information and said 

at least one entry. 
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